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(54) Method and apparatus for automatic discovery of network devices with data forwarding 
capabilities 



(57 ) The present invention comprises a method and 
apparatus for automatic discovery of network devices 
with data forwarding capabilities. In one embodiment, 
the present invention sends SNMP queries to sets and/ 
or ranges of IP numbers to determine whe ther a net- 
work device exists at each IP number and whether the 
network device has IP forwarding capabilities. The set 
of IP numbers searched may be specified by specifying 
ranges or subnets or by providing a list of discrete IP 
numbers. When a new network device with IP forward- 
ing capabilities is discovered, that network device (iden- 
tified by its IP number and SNMP description field) is 
added to a list of discovered network devices. The list 
is displayed to the network manager, who has the option 
of selecting none, one, or more than one of the network 
devices on the network device list for management by 
the network manager's network management system. 
In one embodiment, in addition to discovering newly 
added devices via IP number polling, the invention also 
discovers newly added devices from SNMP messages 
("traps") broadcast by a newly added device. In one em- 
bodiment, each network device discovered as a result 
of a SNMP trap is added to the newly discovered device 
list, regardless of whether or not the network device has 
data forwarding capabilities. 




Figure 3 



Q. 

UJ 



Printed by Jouve. 75001 PARIS (FR) 



EP 1 322 069 A2 



Description 

[0001] The present invention relates to the field of data communications networks, and more particularly to a method 
and apparatus for automatically discovering network devices that have data forwarding capabilities. 

5 [0002] A data communications network transmits data among and between network devices (sometimes also referred 
to as "network elements" or "nodes") physically and logically connected to the network. The physical configuration of 
a network changes as network devices are added or removed from the network and as physical connections between 
devices are made or changed. The logical configuration of a network changes as logical connections are established 
between communicating network devices utilizing the physical structure of the network. Network devices include de- 

10 vices that can send and/or receive data, as well as devices that can forward data. Network devices that can forward 
data are important in all but the very simplest networks. In most networks direct connections do not exist between most 
network devices. Instead, each network device is connected to a limited number of adjacent network devices. For 
network devices to be able to communicate when they are not physically connected, the two communicating network 
devices rely on intermediate network devices to forward communications between them. 

15 [0003] Data is commonly transmitted over a data communications network in the form of discrete chunks of data 
referred to as "packets'*. A string of data is broken up into packets at the sending network device and sent separately 
over the network to the receiving network device. The network device receives the individual packets and assembles 
them in the correct order to reconstruct the original data string. The particular manner in which packets are broken up 
and transmitted from one network device to another is defined as a "network protocol". One prominent network protocol 

20 is the "Internet Protocol", usually referred to by its acronym, "IP", or as the "IP protocol." Another protocol is called 
"Multi-Protocol Label Switching", or "MPLS". 

[0004] Data communications networks are often conceptualized as comprising a hierarchy of communications "lay- 
ers" that establish different types of connections between network devices. The more basic functions are provided at 

the lower layers, while successively more sophisticated functions are provided at successively higher layers. Different 
25 protocols are used to communicate between devices on each layer. Layering allows sophisticated communications 
functions to be built up using relatively simple protocols at each layer. 

[0005] One common hierarchical network model is the so-called OS! "seven-layer" model. In the OSI model, each 
lower layer in the mode! provides communications capabilities or functions that are utilized by the next higher layer. A 
schematic illustration of the OSI seven-layer model is shown in Figure 2. As shown in Figure 2, the seven layers in the 
30 OSI model, beginning from the bottom, are physical layer 205, data link layer 210, network layer 215, transport layer 
220. session layer 225, presentation layer 230, and application layer 235. In relation to the OSI model, the IP protocol 
is commonly considered as being associated with the third layer, network layer 215. 

[0006] In an IP network, each sending and receiving device is assigned a 32-bit address. The address is usually 
written as a series of four "octets" (e.g., numbers within a range of 0-255) separated by periods. Examples of IP ad- 
35 dresses are 127.0.0.1, 205.160.34.112, 23.1.99.244, etc. 

[0007] Each IP packet sent over an IP network includes the sender's IP address and the recipient's IP address. The 
recipient's IP address is used to route the packet from the sending network device via intermediate network devices 
that have IP forwarding capabilities to the recipient network device. 

[0008] An example of a simple network that illustrates IP fonwarding is shown in Figure 1. The network of Figure 1 
40 includes two types of network devices: non-1 P-forwarding devices 105, 110, 115 and 120 (represented by rectangles 
in Figure 1 and which may, for example, comprise personal computers or computer workstations), and IP-forwarding 
devices 125. 130, 135. 140, 145 and 150 (represented by circles in Figure 1 and which may, for example, comprise IP 
routers). The network devices in Figure 1 are interconnected by a various bi-directional connections or links 160, 162, 
164, 166, 168, 170, 172, 174, 176, 178 and 180, represented in Figure 1 by two-headed anrows. Links 160-180 may 
45 comprise direct physical connections between the adjacent network devices, or may comprise logical connections that 
involve intermediate devices but that are seen by the connected devices as direct connections. For example, network 
device 110 is connected to network device 130 via link 166. That is. network device 110 knows that if it sends a com- 
munication via its interface port that is connected to link 166, the communication will be received by network device 
130. It doesn't matter to network device 110 whether link 166 is a single physical connection or a series of physical 
50 connections. Logical links such as links 1 60-1 80 in Figure 1 that connect two network devices will be referred to some- 
times herein as "IP links". The term "IP links" as used herein includes logical links that use the IP protocol, as well as 
logical links utilizing other protocols, such as. for example, MPLS. 

[0009] In the example network of Figure 1, network device 110 is connected directly (via link 166) only to network 
device 130. For network device 110 to communicate to any other network device, the IP fonA/arding capabilities of 
55 network device 1 30 must be used. 

[0010] In Figure 1 , network device 130 has direct connections to three other network devices in addition to network 
device 110. to which it is connected via link 166. The other links are links 160, 168 and 176, which connect network 
device 130 to network devices 125, 135 and 145, respectively. Each of links 160, 166. 168 and 176 are typically 
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connected to separate ports on network device 1 30. Each port may be a separate physical interface, or two or more 
ports may share a single physical interface. Each port may have its own IP address assigned to it. In that case, network 
device 130, as well of each of its ports, may have distinct IP addresses. 

[0011] Network device 130 of Figure 1 has been defined to have IP forwarding capabilities. That means it must be 
5 able to receive an IP packet (intended for delivery to a network device other than network device 1 30) from one of the 
IP links it is connected to and fonvard it along at least one of the other the IP links it is connected to. In the general 
case where network device 130 is a typical router, network device 130 will be able to receive and forward IP packets 
from and to any of the IP links 160, 166, 168 and 176 it is connected to (provided the links are functioning). The other 
network devices 125. 135. 140, 145 and 150 with IP forwarding capabilities in the example of Figure 1 are similarly 
10 able to receive and fonward IP packets from and to any of the IP links they are connected to. 

[0012] If network device 110 wants to send a communication to, for example, network device 115, there are a number 
of paths that the communication can take. The most direct path comprises links 166, 176, and 178. However, other 
paths include the path comprising links 166, 168, 174, 180 and 178, and even the path comprising links 166, 160, 162, 
174, 180 and 178. 

15 [0013] When network device 110 sends out IP packets to network device 115, it does not know what path each of 
the packets will take. Network device 110 simply addresses the packet to network device 115 using network device 
115's IP number (namely 129.111.110.9 in the example of Figure 1), and sends it out over link 166 towards network 

device 130. 

[0014] What network device 130 does with the packet after it receives it depends on how network device 130 is 
20 configured. For example, network device 130 may be configured to forward any packet received from link 166 along 
link 176. Alternatively, network device 130 may be configured to forward packets along links depending on the desti- 
nation IP number of the packet. Network device 130 may also be programmed to monitor traffic along each link and 
to adapt its forwarding scheme to traffic conditions. 

[0015] How each network device forwards packets depends on the capabilities and configuration of the particular 
25 network device. As is evident even from the simple network example of Figure 1 , it is important that network devices 
that do IP forwarding be property configured to interoperate with each other to ensure that packets are correctly routed 
to their destination. 

[0016] Configuration of network devices within a network comprises an aspect of network management. Network 

devices may be locally managed or remotely (centrally) managed. Local management of a network device may be 
30 accomplished using a workstation or terminal directly connected to the network device. Remote management of a 

network device may be accomplished from remote terminals or workstations that communicate with the network device 

via the network, provided the network device is provided with a management protocol that allows remote management. 

One protocol used for remote management of network devices is the Simple Network Management Protocol (SNMP). 

SNMP provides a set of commands and parameters that allow communication with and configuration of network de- 
35 vices. A person who is responsible for management of a network is commonly referred to as a "networkmanager." 

Network management software systems provide tools to network managers that facilitate central management of often 

geographically dispersed network devices. 

[0017] To be able to manage a network device, a network manager must know that the network devce exists, how 

it is connected to the network and to other network devices, and what its capabilities are. In addition, the network device 
40 must have the capability of being remotely managed, the network management system used by the network manager 
must be able to communicate with the network device using the correct protocol, and the network manager must be 
apply to supply any required logins, passwords, or other security information. 

[0018] The configuration of large networks often changes through the addition, removal and/or replacement of net- 
work devices. To properly manage large networks to ensure that IP packets are routed correctly over the network, the 

45 network manager must know when data forwarding network devices are added or removed. 

[0019] In small local networks, for example those in which the entire network comprises only a handful of network 
devices, it is relatively easy for a network manager to physically inspect each network device and know from first hand 
inspection when a network device is added or removed. In large, geographically dispersed networks comprising hun- 
dreds of network devices, it would be extremely difficult for the network manager to know from a first hand inspection 

50 what the state of the entire network is at any given time. 

[0020] A network being managed often comprises of a plurality of subnets. A subnet is a group of network devices 
belonging to a specific block or subset of IP addresses. For example, one type of subnet comprises IP numbers that 
share the first three octets, as for example 215.223.46.x (where "x" can be any number from 0 to 255). Larger subnets 
may share only the first two octets (e.g. 21 5.223.x. y). In addition to subnets, networks may also include individual IP 

55 numbers or ranges of IP numbers. A network manager generally will know which subnets are included in the network 
being managed. 

However, the network manager will not necessarily know beforehand the IP number of a network device to be added 
to a networt(. particulariy if the IP number is not within one of the network's known subnets. 
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Some prior art network management systems provide toots that allow a network manager to gather certain information 

about network devices within the network managed by the network manager. For example, one prior art system allows 
a network manager to send queries to each possible IP number in a subnet or other range of IP numbers ("IP number 
polling") to determine whether a network device is associated with that IP number. If a network device is found, it is 

5 automatically added to the network management system's database of managed network devices. This prior art network 
device discovery system can discover newly added network devices. However, it does not distinguish between network 
devices with IP forwarding capabilities and those without. Furthermore, it does not discover network devices outside 
of the range of IP numbers being searched, nor does it allow a network manager to exert control over which of the 
newly discovered network devices are to be managed by the network management system. 

10 [0021] One object of the present invention is to provide a method for automatic discovery of network devices with 
data foHA/arding capabilities. 

[0022] More precisely, the invention provides a method for automatic discovery of network devices within a managed 
network, said method comprising a step of selecting a first network address from a first set comprising a plurality of 
network addresses, characterized in that said method comprises the steps of: 

15 

sending a first message to said first network address requesting information about any device associated with said 
first network address; 

awaiting a first appropriate response to said first message; 

receiving a first appropriate response from a first device associated with said first network address; 
20 . making said first device available for selection for management by a network management system; 
selecting a second address from said first set of network addresses; 
repeating said sending, and awaiting steps for said second network address. 

[0023] Thus, the method according to the invention sends queries such as SNMP queries to sets and/or ranges of 
25 IP numbers to determine whether a network device exists at each IP number and whether the network device has IP 
fonvarding capabilities, the set of IP numbers searched may be specified by specifying ranges or subnets or by pro- 
viding a list of discrete IP numbers. When a new network device with IP fooA^arding capabilities is discovered, that 
network device (identified by its IP number and SNMP description field) is added to a list of discovered network devices. 
The list is displayed to the network manager, who has the option of selecting none, one, or more than one of the network 
30 devices on the network device list for management by the network manager's network management system. In one 
embodiment, in addition to discovering newly added devices via IP number polling, the invention also discovers newly 
added devices from SNMP messages ("traps") broadcast by a newly added device. In one embodiment, each network 
device discovered as a result of a SNMP trap is added to the newly discovered device list, regardless of whether or 
not the network device has data forwarding capabilities. 
35 [0024] Another object of the present invention is to provide an apparatus for automatic discovery of network devices 
with data fonvarding capabilities. 

[0025] Figure 1 shows a schematic of a data communications network that utilizes data forwarding. 
[0026] Figure 2 shows a schematic of the OSI seven layer network model. 

[0027] Figure 3 shows a flow chart showing an auto discovery process used in an embodiment of the invention. 

40 [0028] Figure 4 shows a flow chart showing an auto discovery process used in an embodiment of the invention. 
[0029] Figure 5 shows a flow chart showing an auto discovery process used in an embodiment of the invention. 
[0030] Figure 6 shows a schematic of an apparatus comprising an embodiment of the invention. 
[0031] A method and apparatus for automatically discovering network devices with data fon^/arding capabilities is 
presented. In one or more embodiments, the invention comprises part of a network management system, such as, for 

45 example, the Alcatel 5620 Network Management System. In one or more embodiments, the invention is implemented 
by means of software programming operating on personal computers, computer workstations and or other computing 
platfomis. In the following description, numerous specific details are set forth to provide a thorough description of the 
invention. However, it will be apparent to one skilled in the art that the invention may be practiced without these specific 
details. In other instances, well-known features have not been described in detail so as not to obscure the invention. 

50 [0032] Figure 3 is a flow chart showing an auto discovery process used in an embodiment of the invention. This 
embodiment forms part of a network management system (NM) that comprises a number of tools to allow a network 
manager (user) to manage routing devices in a network environment. The NM provides a graphical user interface (GUI) 
that displays various views of the network and devices being managed, and that provides menus from which the network 
manager can select various network management operations. In one embodiment, the views that a user may select 

55 include a "physical map" that shows a graphical representation of the physical devices and connections in the network 
being managed (e.g., OSI layers 1 and 2) and an "IP map" that shows a graphical representation of network devices 
and connections at a higher layer (e.g., OSI layer 3). One of the operations that may be selected is the auto discovery 
process of Figure 3. 
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[0033] As shown in Figure 3. the process starts by a user launching the auto discovery process at step 300 (for 
example by selecting a '^Discover'* command from a pull-down menu). At step 302. the discovery mode selected by 
the user is identified. In the embodiment of Figure 3, the user can select either an "IP range" mode or a "configuration 
file" mode. In the "IP range" mode, the discovery process searches IP numbers within ranges specified by the user. In 

5 the "configuration file" mode, the discovery process searches IP numbers listed in a user supplied configuration file. 
[0034] If the selected discovery mode is the "IP range" mode, the configuration information specified by the user for 
the IP range(s) to be searched is read at step 306. In one embodiment, the configuration information for a range 
includes a starting IP address, an ending IP address, and SNMP information. The SNMP information includes the 
SNMP read community string, the remote port number to be used to connect to the SNMP agent at each IP address, 

10 a timeout value, a retry value, and a SNMP version number. 

[0035] After the configuration information for the current range is read at step 306, the first IP number in the range 
is selected at step 308. A SNMP "get-request" command is sent to the selected IP number at step 310 using the SNMP 
configuration parameters identified at step 306. A SNMP "get request" command is a request to the SNMP agent at 
the queried IP address to respond with identification information for any network device at that IP address. 

15 [0036] At step 31 2 a determination is made as to whether a response from the queried IP address has been received 
within timeout and retry limits specified in the configuration information. 

[0037] If no response is received within the applicable timeout and retry limits, a determination is made at step 314 
as to whether the end of the IP range being searched has been reached. If the end of the IP range has not been 
reached, the process selects the next IP number in the range at step 316 and returns to step 310. If the end of the IP 
20 range has been reached, the auto discovery process ends at step 318. Alternatively, in embodiments in which a user 
may specify multiple IP ranges, instead of ending at step 318, the process may go on to the next range and return to 
step 306. 

[0038] If a response to the SNMP "get request" message is received at step 312, the response is inspected to see 
whether the SNMP reply identifies the responding device type as a router. If the device type specified in the SNMP 

25 reply is not a router, the process returns to step 314. 

[0039] If the device type specified in the SNMP reply is a router, a determination is made at step 324 as to whether 
the IP number for the responding device Is already Included in a managed devices database of the N M. The managed 
devices database is a database of all network devices that are currently being managed by the NM. If the IP number 
is already in the managed devices database, an error message is logged at step 326 and the process returns to step 

30 314. The error message indicates that the device discovered at the current IP number is already in the managed 
devices database. While the message is referred to as an error message, the message need not connote the occurrence 
of an error, but may simply serve as an indication of the discovery or re-discovery of a device already in the managed 
devices database. 

[0040] If the current IP number is not in the managed devices database, a determination is made at step 328 as to 
35 whether the current IP address is already in the detected element list. The detected element list is a list of detected 
devices that have not yet been selected by the user to be managed by the NM. In one embodiment, the detected 
element list is persistent and cumulative, so that results of previous executions of the discovery process remain in the 
detected element list unless selected for management or deleted by the user. If the current IP address is already in 
the detected element list, the detected element's parameters as listed in the detected element list are compared to the 
40 parameters received in the response to the sent "get-request" command and updated as required at step 330. The 
process then returns to step 314. 

[0041] If the current IP number is not in the detected element list, a new detected element having the parameters 
contained in the response to the "get-request" command is created at step 332. The new detected element is then 
added to the detected element list at step 334, and the process returns to step 314. 
45 [0042] Going back to step 302, if the discovery mode specified by the user is "configuration file", the process proceeds 
to the step 404 of Figure 4. 

[0043] The auto discovery process for the configuratk>n file mode shown in Figure 4 is nearly identical to the auto 
discovery process for the IP range mode shown in Figure 3, except that instead of incrementing through a range of IP 
numbers, the process increments through a user-supplied list of discrete IP numbers. On one embodiment, the con- 
so figuration file contains a list of discrete IP numbers together with SNMP configuration parameters for each listed IP 
number. 

[0044] From step 404 in Figure 4, the process proceeds to step 406, where the first IP address in the configuration 
file is selected. At step 408, the corresponding SNMP parameters are read from the configuration file. In one embod- 
iment, the SNMP configuration information for each IP number in the configuration file includes the SNMP read com- 
55 muntty string, the remote port number to be used to connect to the SNMP agent at that IP address, a timeout value, a 
retry value, and a SNMP version number. In one embodiment default values are used for any SNMP parameter missing 
from the configuration file. 

[0045] After the configuration information for the cunrent IP number is read at step 408. a SNMP "get-request" com- 
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mand is sent to the selected IP number at step 410 using the SNMP configuration parameters identified at step 406. 
[0046] At step 41 2 a determination is made as to whether a response from the queried IP address has been received 
within timeout and retry limits specified in configuration parameters. 

[0047] If no response is received within the applicable timeout and retry limits, a determination is made at step 414 
5 as to whether the end of the configuration file has been reached. If the end of configuration file has not been reached, 
the process selects the next IP number in the configuration file and returns to step 408. If the end of the configuration 
has been reached^ the auto discovery process ends at step 418. 

[0048] If a response to the SNMP "get request" message Is received at step 412, the response is inspected to see 
whether the SNMP reply identifies the responding device type as router If the device type specified in the SNMP reply 

10 is not a router, the process returns to step 414. 

[0049] If the device type specified in the SNMP reply is a router, the process at step 424 checks to see whether the 
IP number for the responding device is already included in the managed devices database of the NM. If the IP number 
is already in the managed devices database, an error message is logged at step 426 and the process returns to step 
414. The error message indicates that the device discovered at the current IP number is already in the managed 

15 devices database. While the message is referred to as an error message, the message need not connote the occurrence 
of an error, but may simply serve as an indication of the discovery or re-discovery of a device already in the managed 
devices database. 

[0050] If the current IP number is not in the managed devices database, a determination is made at step 428 as to 
whether the current IP address is already in the detected element list. If the current IP address is already in the detected 
20 element list, the detected element's parameters as listed in the detected element list are compared to the parameters 
received in the response to the sent "get-request" command and updated as required at step 430. The process then 
returns to step 414. 

[0051] If the current IP number is not in the detected element list, a new detected element having the parameters 
contained in the response to the "get-request" command is created at step 432. The new detected element is then 

25 added to the detected element list at step 434, and the process returns to step 414, 

[0052] In addition to the manually invoked discovery function of Figures 3 and 4, one or more embodiments of the 
invention comprise a discovery function that is automatically invoked via receipt of a SNMP notification by the NM. An 
embodiment of an auto discovery process invoked by a SNMP notification is shown in Figure 5. 
[0053] In the embodiment of Figure 5, the SNMP port of the workstation or other system on which the NM is running 

30 is monitored at step 500 for SNMP notifications sent to the NM from SNMP network devices. Such notifications are 
sometimes referred to as SNMP "traps". A network device may be configured to send a SNMP trap to the NM if the 
device is intended to be managed by the NM. In that case, the person installing and configuring the device may configure 
it to send the NM a SNMP trap once the device is installed on the network, when the device boots up. or at some other 
time or times, 

35 [0054] When a SNMP notification is received at step 505, a determination is made at step 510 as to whether the IP 
address of the device sending the SNMP notification is already contained in the NM*s managed devices database. If 
the device is already included in the managed devices database, the process returns to step 500. 
[0055] If the device is not already contained in the managed devices database, a determination is made at step 51 5 
as to whether the IP address of the device is already in the NM's detected element list. If the device is already included 

40 in the detected element list, the process retums to step 500. 

[0056] If the device is not already in the detected element list, a new detected element object is created in step 520, 
and the new object, represenfing the new device, is added to the detected element list at step 525. At this point the 
"type" attribute of the detected element object is specified as being "unknown." 

[0057] At step 530. a determination is made as to whether the IP address for the device is included in a user specified 
45 auto discovery IP range or configuration file. If it is, the corresponding SMNP configuration parameters are extracted 
at step 535, and a SNMP "get-request" message is sent to the device using the extracted SNMP configuration param- 
eters at step 545. If the IP address is not in an existing IP range or configuration file, default SNMP configuration 
parameters are obtained at step 540 and used for the SNMP "get-request" sent to the device at step 545. 
[0058] At step 550, a determination is made as to whether a response to the SNMP "get-request" message has been 
50 received within the applicable timeout and retry limits. If no response is received, the process retums to step 500. If a 
response is received, the attributes of the detected element object are updated with information from the response at 
step 555. For example, if the response identifies the detected device as a router, the type attribute of the detected 
element object is changed from "unknown" to "router." After the detected element object attributes are updated as 
appropriate at step 555. the process returns to step 500. 
55 [0059] In one embodiment, the auto discovery process is launched from a graphic user interface referred to as an 
"Auto Discovery Window". In one embodiment, the Auto Discovery Window comprises two panes. A top pane displays 
the IP range(s) or addresses to search, and the bottom pane displays the discovered elements. A menu bar provides 
access to various functions associated with the Auto Discovery Window. 
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Table 1 





First level 
menu 


Second level 
menu 


Description 


5 


File Range 


Exit New 


Closes the Auto Discovery Window. Displays a form enabling the user to 
create and configure a new range. 


10 




Edit 


Displays a form enabling the user to edit the configuration of the selected 

range. 

This menu item is grayed out if no range is selected or if the selected 
range is actively discovering routing devices. Only single selection is 
supported for this command. 


15 




Delete 


Deletes the selected Range. This command is grayed out if no range is 
selected or if the selected range(s) are actively discovering routing 
devices. 






Discover 


Starts discovering supported routing devices for the selected 


20 






range(s). 

This command is grayed out if no range is selected or if the selected range 
(s) are already discovering routing devices. 






Cancel 


Stops discovering routing devices for the selected range(s). This 
command is grayed out if no range is selected or if the selected range(s) 
are not actively discovering routing devices. 


25 
30 


Element 


Log Manage 


Displays the associated log file for the selected range. 
This command is grayed out for the following reasons: 
No range is selected 
More than one range is selected 

No log file exists (A Discovery has never occurred for this range.) 
The selected range is actively discovering network elements. 
Commits a Detected Network Element for management within the 5620. 
This command is grayed out if no Detected Network Element is selected 
or if the selected elemert(s) are not routing devices. 


35 




View Configuration 


Displays a form containing the configuration of the Detected Network 
Element. 

This command is grayed out if no Detected Network Element is selected. 
Only single selection is supported for this command. 


40 




Delete 


Deletes the selected Detected Network Elements. This command is 
grayed out if no element is selected or if the selected element(s) are in 
the process of being committed for management within the 5620. 




View 


Refresh 


Refreshes the information displayed within the Auto Discovery Window. 




Help 




Display appropriate help page in a browser 



45 



[0060] Table 1 lists the menu commands available to a user in the Auto Discovery Window in an embodiment of the 
invention. 

[0061] The first column of Table 1 lists the first level menu commands. These are the commands that are normally 

displayed on the menu bar when no command has been selected. In the embodiment of Table 1, the available first 
level commands comprise "File", "Range", "Element", "View" and "Help". Selecting one of the first level menu com- 
mands displays a pull down menu of corresponding second level menu commands. 

[0062] Under the "File" first level command, the second level command "Exit" is available. Selecting the "Exit" com- 
mand closes the auto discovery window. 

[0063] Under the "Range" first level command, the second level commands "New", "Edit". "Delete", "Discover", "Can- 
cel" and "Log" are available. 

[0064] Selecting the "New" command displays a form that allows the user to configure a new IP range for auto 
discovery. Table 2 shows the fields that are displayed in an IP range form in an embodiment of the invention. 
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Table 2 



10 



15 



20 



25 



Field 


Require 
d 


Range 


Default 


Description 


Starting IP Address 


YES 


Class A to C. No Loopback or 
broadcast addresses. 


0.0.0.0 


The starting point for the 
Discovery 


Ending IP Address 


YES 


Class A to C. No Loopback or 
broadcast addresses. 


0.0.0.0 


The ending point for the 
Discovery 


SNMP Read Comnnunlty 


YES 


Any valid string. 


""public" 


The SNMP Read community 
string. Only one community 
string can be specified per IP 
range. 


Remote Port 


YES 


1-64K 


161 


Remote port number to use to 
connect to the SNMP agent at 
each IP address. 


Timeout 


YES 


Any valid positive integer 
including zero. 


5000 


SNMP Timeout value (ms) 


Retries 


YES 


Any valid positive integer 
including zero. 


3 


Number of times to attempt to 
connect to the SNMP agent at 
each IP address. 


SNMP Version 


YES 


v1, v2c 


Vl 


Version of the SNMP Agent. 



30 



35 



40 



45 



[0065] The IP range form of Table 2 comprises seven fields: "Starting IP Address", "Ending IP Address", "SNMP 
Read Community", "Remote Port", "Timeout", "Retries" and "SNMP Version." As shown in Table 2, all fields must 
contain values. Default values are supplied which are used if the user does not enter new values. 
[0066] In some embodiments, the "New" command also allows the creation of a range of discrete IP numbers im- 
ported from a file. The file contains the parameters for each IP number shown in Table two, with the exception of the 
beginning and ending range addresses. 

[0067] Turning back to Table 1 , the next second level command available under the "Range" first level command is 
"Edit". Selecting the "Edit" command displays a form that allows a user to edit the configuration of a selected range (i. 
e. if the user has selected a range from the IP range pane of the auto discovery window) using a form with the same 
fields as in Table 2. The "Edit" command is grayed out (making it not available to the user) if no range has been selected. 
Only one range at a time may be selected to use the "Edit" command. 

[0068] The third second level command available under "Range" is "Delete". Selecting the "Delete" command deletes 
the selected range(s). The "Delete" command is grayed out if no range is selected. 

[0069] The fourth command available under "Range" Is "Discover". Selecting the "Discover" command begins the 
auto discovery process for the selected range{s). The "Discover" command is grayed out if no range is selected. 
[0070] The fifth command available under "Range" is "Cancel." Selecting the "Cancel" command stops the auto 
discovery process for the selected range(s). The "Cancel" command is grayed out if no range is selected or if no 
discovery process is taking place for the selected range(s). 

[0071] The sixth and last second level command available under "Range" is "Log". Selecting the "Log" command 
displays an associated log file for the selected range. The "Log" command is grayed out under any of the following 
circumstances: 



50 



(a) No range is selected. 

(b) More than one range Is selected. 

(c) No log file exists (no discovery process has yet taken place for the range). 

(d) A discovery process for the range is actively taking place. 



55 



[0072] The next first level command after "Range" is "Element". The second level commands available under "Ele- 
ment" include "Manage", "View Configuration" and "Delete." 

[0073] The "Manage" command selects a discovered element from the discovered element list for management by 
the NM (also referred to as "committing" the selected element). In one embodiment, once an element is committed, 
the NM validates the element and displays the element in the NM's physical and logical network maps. The committed 
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element is also removed from the detected element list. The "Manage" element is grayed out if no detected element 
is selected or if the selected etement(s) are not IP forwarding (routing) devices. 

[0074] The "View Configuration" command displays a form containing configuration information available for the 
selected element (the available information may include items not included in the information displayed in the detected 
5 element list). Table 3 shows the information displayed in an embodiment of the invention. The "View Configuration" 
command is grayed out if no element is selected. 



Table 3 



10 


Column 


Values 


Default 


Description 


IP 


N/A 


IP Address of the device. 


The IP address of the 
Detected Network 
Element. 


15 


Type 


• Unknown • Routing • 
Non-routing • 
Unsupported • CPSS 


Unknown 


The type of Detected 
Network Element, 


20 
25 


uommit otaius 


• Not Committed • 
Requested • In Progress • 
Not Applicable • Not 
Available 


iMOi oommitieo 


1 ne managemeni siaius oi 
the Detected Network 
Element. Those network 
elements that are not to be 
managed through Auto 
Discovery have the "Not 
Applicable" status. A "Not 
Available" status is 
displayed if there is a 
failure to communicate 
with the network element. 


30 


SNMP Version 


• v1 • v2c 


v1 


The SNMP version used to 
communicate with the 
Detected Network 
Element. 


35 


SNMP Read Community 
String 


N/A 


"public" 


The SNMP Read 
Community String. 


SNMP Description 


N/A 


The SNMP Description of 
the device, 


The SNMP Description of 
the network element. 



[0075] The final second level command available under "Element" is "Delete". Selecting the "Delete" command de- 
40 letes the selected element. The "Delete" command is grayed out if no element or more than one element are selected. 
[0076] The two final first level menu commands are "View" and "Help". Selecting the "View" command displays a 
single second level command, "Refresh", that causes the information displayed in the Auto Discovery Window to be 
updated. Selecting the "Help" first level command displays a help information, for example via a help page in a browser. 
[0077] Figure 6 is a schematic of an apparatus comprising an embodiment of the invention. The embodiment of 
45 Figure 6 comprises a central processing unit (CPU) 600, a display device 650, a keyboard 680 and a mouse or trackball 
690. CPU 600 may, for example, comprise a personal computer or computer workstation containing one or more proc- 
essors that execute computer software program instructions. In the embodiment of Figure 6, CPU 600 comprises 
computer program instructions for a network management system 610, which comprise computer program instructions 
620 for analyzing messages received by CPU 600 via network communications interface 630, which connects CPU 
50 600 to network 640. 

[0078] Display device 660, which may, for example, comprise a CRT or LCD computer display device, comprises a 
display area 655 for displaying graphical and textual information to a user. Display area 655 may also comprise a touch 
screen or other mechanism for accepting input from a user. In the embodiment of Figure 6, display area 655 is divided 
into two panes or windows 660 and 670. In one embodiment, window 660 comprises a discovery range window in 
55 which network address ranges for discovering network devices can be specified by a user and are displayed, while 
window 670 comprises a discovered devices window in which discovered devices are displayed and from which a user 
can select one or more of the listed devices for management. Display device 660 together with keyboard 680 and 
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mouse or trackball 690 form a user interface that provides information to and accepts information from a user 
[0079] Thus, a method and apparatus for automatic discovery of network devices with data forwarding capabilities 
has been presented. Although the invention has been described using certain specific examples, it wil) be apparent to 
those skilled in the art that the invention is not limited to these few examples. For example, although the invention has 
5 been described with respect to network devices having IP forwarding capabilities, the invention is applicable to network 
devices having forwarding capabilities using other protocols as well, as for example. Multiple Protocol Label Switching 
("MPLS"). Other embodiments utilizing the inventive features of the invention will be apparent to those skilled in the 
art, and are encompassed herein. 

10 

Claims 

1. Method for automatic discovery of network devices within a managed network, said method comprising a step of 
selecting a first network address from a first set comprising a plurality of network addresses, characterized In 
15 that said method comprises the steps of: 

sending a first message to said first network address requesting information about any device associated with 
said first network address; 

awaiting a first appropriate response to said first message; 
20 receiving a first appropriate response from a first device associated with said first network address; 

making said first device available for selection for management by a network management system; 
selecting a second address from said first set of network addresses; 
repeating said sending, and awaiting steps for said second network address. 

25 2, Method of claim 1 further comprising the steps of: 

failing to receive a second appropriate response to a second message sent to said second address within a 
response time period; 

selecting a third network address from said first set of network addresses; 
30 repeating said sending and awaiting steps for said third network address. 

3. Method of claim 1 or ciaim 2 wherein said first set of network addresses comprises a range of network addresses. 

4. Method of claim 1 or claim 2 wherein said first set of network addresses comprises a list of network addresses. 

35 

5. Method according to any one of claims 1 to 4 further comprising the steps of: 

selecting a fourth network address from a second set comprising a plurality of network addresses; 
sending a fourth message to said fourth network address requesting information about any device associated 
<o with said fourth network address; 

awaiting an appropriate response to said fourth message; 

6. Method according to nay one of claims 1 to 5 wherein said step oif sending said first message comprises sending 
said first message using a networt< management protocol. 

45 

7. Method of claim 6 wherein said network management protocol comprises a Simple Network Management Protocol 
(SNMP). 

8. Method according to any one of claims 1 to 7 wherein said step of receiving said first appropriate response to said 
50 first message comprises receiving a message comprising information about a type of said first device. 

9. Method of claim 8 wherein said step of receiving said first appropriate response to said first message comprises 
receiving a message identifying said type of said first device as a device having data forwarding capabilities. 

55 10. Method according to any one of claims 2 to 9 wherein said step of failing to receive said second appropriate 
response to said second message comprises receiving a message comprising information about a type of a second 
device associated with said second network address. 
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1 1 . Method of claim 1 0 wherein said step of failing to receive said second appropriate response to said second message 
comprises receiving a message identifying said type of said second device as a device other than a device having 
data forwarding capabilities. 

12. Method according to any one of claims 1 to 11 further comprising the step of obtaining configuration information 
for said first message prior to sending said first message. 

13. Method of claim 1 2 wherein said step of obtaining said configuration information for said first message comprises 
obtaining said configuration information from said first set. 

14. Method of claim 1 2 or claim 13 wherein said step of obtaining said configuration information for said first message 
comprises obtaining a response time period. 

15. Method according to any one of claims 12 to 14 wherein said step of obtaining said configuration information for 
15 said first message comprises obtaining security parameters. 

16. Method according to any one of claims 1 to 15 wherein said step of making said first device available for selection 
for management by a network management system comprises adding said first device to a set of discovered 
devices. 

20 

17. Method of claim 1 6 wherein said step of adding said first device to a set of discovered devices comprises the step 
of deleting an existing device associated with said first network address from said set of discovered devices prior 
to adding said first device to said set of discovered devices. 

25 18. Method of claim 1 6 or claim 17 further comprising the step displaying said set of discovered devices on a display 
device. 

19. Method according to any one of claims 1 to 18 further comprising the step of creating said first set of network 
addresses. 

30 

20. Method of claim 1 9 wherein said step of creating said first set of network addresses comprises receiving a beginning 
network address and an ending network address. 

21. Method of claim 1 9 or claim 20 wherein said step of creating said first set of networit addresses comprises receiving 
35 a data file containing a plurality of discrete network addresses. 

22. Method according to any one of claims 1 to 21 further comprising the steps of: 

receiving a fifth message from a fifth device associated with a fifth network address; 
40 making said fifth device available for selection for management by a networi^ management system. 

23. Method of claim 22 wherein said step of receiving said fifth message from said fifth device comprises receiving a 
SNMP message. 

45 24. Method of claim 22 or claim 23 wherein said step of making said fifth device available for selection for management 
by a network management system comprises adding said fifth device to a set of discovered devices. 

25. Method according to any one of claims 22 to 24 wherein said step of receiving said fifth message from said fifth 
device comprises receiving a SNMP message. 



50 



55 



26. Method according to any one of claims 22 to 25 wherein said step of receiving said fifth message from said fifth 
device comprises receiving a fifth network address associated with said fifth network device. 

27. Method of claim 26 further comprising the steps of: 

sending a sixth message to said fifth network address requesting information about said fifth device; 
awaiting a sixth appropriate response to said sixth message; 
receiving a sixth appropriate response from said fifth device. 



11 



EP 1 322 069 A2 



28. Method of claim 27 wherein said step of receiving said sixth appropriate response comprises receiving a message 
comprising information about a type of said fifth device. 

29. Method of claim 28 wherein said step of receiving said sixth appropriate response comprises receiving a message 
5 identifying said type of said fifth device as a device having data fonwarding capabilities. 

30. Apparatus for automatic discovery of network devices within a managed network comprising: 

a display device comprising a discovery range window for displaying a network address range for discovery 
.10 of network devices and a discovered devices window for displaying identification information for devices dis- 

covered within said network address range. 

31 . Apparatus of claim 30 further comprising a user interface for accepting input from a user, said user interface com- 
prising means for said user to specify said discovery range. 

15 

32. Apparatus of claim 31 wherein said user Interface comprises means for said user to select one or more of said 
discovered devices displayed in said discovered devices window for management by a network management 
system. 

20 33. Apparatus according to any one of claims 30 to 32 further comprising a network communications system for sending 
network communications to each network address in said discovery range and for receiving responses from any 
network address in said discovery range. 

34. Apparatus according to any one of claims 30 to 33 wherein said range comprises a plurality of contiguous network 

25 addresses. 

35. Apparatus according to any one of claims 30 to 33 wherein said range comprises a plurality of discreet, non- 
contiguous network addresses. 

30 36. Apparatus according to any one of claims 33 to 35 comprising a message response analyzer for analyzing re- 
sponses received from network addresses in said discovery range. 

37. Apparatus of claim 36 wherein said message response analyzer comprises identification means for kientifying a 
type of a device sending a response. 

35 

38. Apparatus according to any one of claims 33 to 37 wherein said network communications system comprises means 
for receiving messages originating from network devices. 

39. Apparatus of claim 38 wherein said means for receiving messages originating from network devices comprises 
40 means for receiving SNMP messages. 

40. Apparatus according to any one of claims 30 to 39 wherein said discovery range comprises IP addresses. 

41 . Apparatus according to any one of claims 30 to 40 wherein said discovered devices window comprises information 
45 identifying a discovered device's type. 

42. Method for automatic discovery of network devices within a managed networi< comprising the steps of: 

receiving a first message from a first device associated with a first network address; 
50 - making said first device available for selection for management by a network management system. 



55 
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